home

pdfsty.exe

PDF Complete

PDF Complete

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PDF Complete’.
Publisher:
PDF Complete Inc  (signed by PDF Complete)

Product:
PDF Complete

Description:
Sentry for PDF

Version:
4.0.65.2001

MD5:
6cdb1de8c8a4dcaa2e783247e7dd062a

SHA-1:
f834dbdd1a74ff3b5c0a5d4194f2421ce69b14d9

SHA-256:
d20024f5ac8e40fbd52f3a4b237c281b901714009d3fcb7969f00c0e93ffeb75

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/27/2024 10:40:20 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Worm.Runouce-878
0.98/23203

File size:
643 KB (658,424 bytes)

Product version:
4.0.65.2001

Copyright:
Copyright © 1998-2011 PDF Complete Inc.

Trademarks:
PDF Complete® is a registered trademark of PDF Complete, Inc.

Original file name:
pdfsty.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pdf complete\pdfsty.exe

Digital Signature
Signed by:
PDF Complete

Authority:
Thawte, Inc.

Valid from:
2/15/2011 7:00:00 PM

Valid to:
2/15/2013 6:59:59 PM

Subject:
CN=PDF Complete, OU=Secure Application Development, O=PDF Complete, L=Austin, S=Texas, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
36B5AA8C6D1C8A92D4128D120FE4DDFC

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x31B74

Entry point:
55, 8B, EC, 83, C4, F0, B8, DC, 19, 43, 00, E8, 2C, 4F, FD, FF, 33, C0, 55, 68, AA, 1B, 43, 00, 64, FF, 30, 64, 89, 20, E8, 4D, F6, FF, FF, E8, 20, 2A, FD, FF, 33, C0, 5A, 59, 59, 64, 89, 10, 68, B1, 1B, 43, 00, C3, E9, 4D, 24, FD, FF, EB, F8, E8, 2E, 29, FD, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9260

Developed / compiled with:
Microsoft Visual C++

Code size:
195 KB (199,680 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PDF Complete

Command:
C:\Program Files\pdf complete\pdfsty.exe


Scan pdfsty.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.